This is an automated email from the ASF dual-hosted git repository.
pingtimeout pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/polaris.git
The following commit(s) were added to refs/heads/main by this push:
new 888efb0ac Update changelog with missing 1.3.0 features (#3087)
888efb0ac is described below
commit 888efb0aca5b65bc09825a94963f3abb92a51a38
Author: Pierre Laporte <[email protected]>
AuthorDate: Wed Nov 19 18:18:03 2025 +0100
Update changelog with missing 1.3.0 features (#3087)
---
CHANGELOG.md | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 493e0c60d..e715a2a2c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -34,7 +34,13 @@ request adding CHANGELOG notes for breaking (!) changes and
possibly other secti
set to `OFF` by default). Custom reporters can be implemented and configured
to send metrics to
external systems for further analysis and monitoring.
+- Support for [Open Policy Agent (OPA)] integration has been added to Polaris.
This enables delegating
+ authorization decisions to external policy decision points, allowing
organizations to centralize
+ policy management and implement complex authorization rules. OPA integration
can be enabled by setting
+ `polaris.authorization.type=opa` in the Polaris configuration.
+
[Iceberg Metrics Reporting]:
https://iceberg.apache.org/docs/latest/metrics-reporting/
+[Open Policy Agent (OPA)]: https://www.openpolicyagent.org/
### Upgrade notes
@@ -48,7 +54,9 @@ request adding CHANGELOG notes for breaking (!) changes and
possibly other secti
### New Features
+- Added `--no-sts` flag to CLI to support S3-compatible storage systems that
do not have Security Token Service available.
- Support credential vending for federated catalogs.
`ALLOW_FEDERATED_CATALOGS_CREDENTIAL_VENDING` (default: true) was added to
toggle this feature.
+- Enhanced catalog federation with SigV4 authentication support, additional
authentication types for credential vending, and location-based access
restrictions to block credential vending for remote tables outside allowed
location lists.
### Changes
